#cwe-94

共收录 1478 条相关情报。

← 返回所有主题
漏洞预警2026-04-28 发布INFO

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_order of the file /admin/ajax.php?action=save_order. Performing a manipu...

CVE-2026-7296

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_order of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulati...

CVE-2026-7269

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object...

CVE-2026-40967

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown function. The manipulation of the argument angerDisplay results in cross sit...

CVE-2026-7230

A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown function. The manip

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, ...

CVE-2026-40967

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/comp...

CVE-2026-7222

A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unk

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executin...

CVE-2026-7200

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary co...

CVE-2026-7191

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /index.php?page=categories. Performing a mani...

CVE-2026-7129

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affects some unknown processing of the file 370project/mark.php. Performing a man...

CVE-2026-7116

A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affects some unknown pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/descr...

CVE-2026-7110

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. The manipulation of the argument ID...

CVE-2026-7095

A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The manipula...

CVE-2026-7090

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appoin...

CVE-2026-7089

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-15 发布HIGH

The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who...

CVE-2025-54550

The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xco

来源摘录 · NVD

漏洞预警2024-07-16 发布HIGH

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt...

CVE-2024-40637

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to

来源摘录 · NVD

漏洞预警2021-03-03 发布CRITICAL

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option of the pug compiler...

CVE-2021-21353

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker wa

来源摘录 · NVD

漏洞预警2019-03-21 发布CRITICAL

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.

CVE-2019-5413

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.

来源摘录 · NVD